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REMARKS/ARGUMENTS 



Status of the Application 



Claims 1 through 20 are pending in this application. Applicants' undersigned 
representative proposes adding claims 21 through 30. Claims 1 through 19 stand rejected under 
35 U.S.C. § 102(e) as allegedly being anticipated by U.S. Patent Publication 2002/0038357 Al 
(Haverstock et al). Claim 20 stands rejected under 35 U.S.C. § 103(a) as allegedly being 
unpatentable over Haverstock et al. in view of U.S. Patent 5,555,375 (Sudama). 

On June 8, 2004, Applicants' undersigned representative discussed the present 
application and pending rejections with Examiner Lin. Applicants' undersigned representative 
wishes to thank Examiner Lin for discussing the pending rejections and for his continued 
consideration of this application. 

Applicants' undersigned representative respectfully requests reconsideration of the 
rejections in light of the above amendments and following remarks. 



Applicants' have noted 

[a] particularly important operation in workflow systems is 
managing access to documents as they move through various 
stages of a workflow. In a typical document-publishing scenario, 
significant time can elapse between creation of a document and 
final approval of the document for external viewing or publishing. 
For example, after an author revises an existing document and 
enters the revised document into a publishing workflow, several 
editors may need to review the document prior to the document 
receiving final approval for viewing by people outside the 
publishing group. It may take an extended period before the 
editors have an opportunity to review the document. In the 
meantime, it is necessary to restrict access to the revised document 
until it receives final approval. Indeed, it is necessary to restrict 
access to the document even if the editing process takes only short 
time. Editors should be given access to the new version of the 
document for purposes of editing and approving the document 
while those without approval authority should be given access 
to the original version of the document without revisions. 



Prior Art Rejections 
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Thus, it can be said that the original or "base" document and 
the revised document should be maintained separately, or 
"isolated" from each other and access given as appropriate to 
one or the other during the period that the document is 
undergoing approval in the publishing workflow. 

Applicants' have disclosed systems and methods to provide such functionality. 

According to an aspect of the disclosed systems and methods, 

when a revision is made to an original or "base" document and 
the revision placed in a workflow, a separate "working" copy 
of the base document is generated. As the document moves 
through the workflow, new versions of the "working" copy 
document may also be generated. Security controls, which define 
who may access the base document as well as any versions of the 
working copy document, are defined and stored in relation to the 
documents. The security controls further define the types of 
actions users may take with respect to the document. For example, 
the security controls may specify that a user should be given 
access to the working copy document as opposed to the base 
document and should have the capability to check-out the working 
copy of the document for revision. 

Accordingly, Applicants' claim 1 is directed to a computer-implemented method for 
controlling access to documents during a workflow, comprising: 



upon entry of a base document into a workflow, 
creating a working copy of the base document; 

selectively providing a user access to the base document 
depending upon the identity of a user; 

selectively providing a user access to the working copy 
of the base document depending upon the identity of a user; 
and 

if a user is provided access to the working copy of the base 
document, selectively providing access to perform operations on 
the working copy of the base document depending upon the 
identity of a user. 



In order for a reference to anticipate claim 1, the reference must teach all of the claimed 
elements, including creating a working copy of the base document upon entry of a base 



document into a workflow, selectively providing a user access to the base document 
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depending upon the identity of a user, and selectively providing a user accessto the working 
copy of the base document depending upon the identity of a user. Applicants' undersigned 
representative respectfully submits that the Haverstock et al. neither teach nor even suggest the 
emphasized claim elements. k 

Claim 13 is directed to a system for providing document isolation in a workflow 
environment comprising: 



a processor, wherein said processor is operable to execute 
instructions for performing the following acts: 

maintaining for a base document undergoing a 
publishing workflow, a copy of the base document; 

maintaining access control data in relation to the base 
document and the copy of the base document; 

upon receipt of a request to access the base document, 
selectively determining based on the access control data to 
provide access to the base document; and 

upon receipt of a request to access the base document, 
selectively determining based on the access control data to 
provide access to the copy of the base document. 



In order for a reference to anticipate claim 13, the reference must teach each of the claimed 
elements, including maintaining a copy of a base document undergoing a publishing 
workflow, upon receipt of a request to access the base document selectively determining 
based on the access control data to provide access to the base document, and upon receipt 
of a request to access the base document selectively determining based on the access control 
data to provide access to the copy of the base document. Applicants' undersigned 
representative respectfully suggests that Haverstock et al. does not teach or even submits the 
emphasized claim elements. 

Haverstock et al. allege to disclose a system for enabling access to non-HTML files from 
a Web browser. (Abstract). When a user requests a non-HTML file from a database using a Web 
browser, the Web browser transmits the request to a server via an HTTP server and module. 
(Abstract). The server locates the requested document and translates the document into a format 
supported by the Web browser. (Abstract). The translated document is then communicated to the 



Page 12 of 17 





DOCKET NO.: MSFT-0178 (150708.1) 
Application No.: 09/607,170 

Office Action - 12/23/03 and Advisory Action - 4/04/04 



PATENT 

REPLY FILED UNDER EXPEDITED 
PROCEDURE PURSUANT TO 
37 CFR§ 1.116 



" "Web" browser; (Abstract): Havefstock et al. further disclose restricting access to fields "and 
employs the concept of roles in doing so. flffl 57, 65.) For example, a user with the "depositor" 
role can write to a database, (paragraph 68.) A user with the "reader" role has read-only access 
to pages on the Web site, (paragraph 69.) An "author" can create and post new pages to the Web 
site, (paragraph 70.) 

Haverstock et al. do not disclose or even suggest creating a copy of a base document 
upon creation of a workflow, selectively providing a user access to the base document 
depending upon the identity of a user, and selectively providing a user access to the working 
copy of the base document depending upon the identity of a user. Rather, in the system 
disclosed by Haverstock et al., a user is always given access to one document - the document 
that has been translated for distribution by the Web browser. (Abstract.) In the system 
disclosed by Haverstock, a user never receives access to the non-HTML document. Thus, in 
contradistinction to the claims, Haverstock et al. do not disclose or even suggest that a user 
selectively be given access to the base document depending on the identity of the user, and 
that a user selectively be given access to the working copy of the base document depending on 
the identity of the user. (See Advisory Action, 1). Indeed, the Advisory Action implicitly 
admits that Haverstock does not teach this. Furthermore, while Haverstock et al. disclose using 
"roles" to control access to data, they do not teach or suggest selectively providing a user access 
to the base document or the copy of the base document depending upon the identity of the 
user. Indeed, in the system disclosed by Haverstock, the identity of the user plays no part in 
whether a user is provided access to the base document or whether the user is provided access to 
the working copy of the base document. Accordingly, Applicants' undersigned representative 
respectfully requests that the rejection be withdrawn. If the rejection is maintained, Applicants' 
undersigned representative respectfully requests that in order to facilitate examination of the 
claims, the Examiner not only identify paragraph numbers, but quote the specific language in the 
reference that is alleged to teach each element of each claim. 
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Claim 20 Is Non-Obvious 

Claim 20 is directed to a method for controlling access to operations that may be 
performed on a copy of a base document, comprising: 



upon creation of a workflow, creating a copy of a base 
document; 

receiving a request to create a new operation that may 
be performed on the copy of the base document; 

assigning a unique identifier to the new operation; 

updating the access control list to include an entry for 
the unique identifier for the new operation; and 

updating the access control list to include an entry 
identifying the roles that have access to the new operation. 



In order for a reference or set of references to render claim 20 obvious, the references must teach 
all of the elements and must also teach combining the elements in the claimed combination. 
Applicants' undersigned representative respectfully suggests that the cited references do not even 
teach all of the claim limitations, and can not possibly suggest combining the limitations as 
required by claim 20. Accordingly, it is not possible that the cited references render claim 20 
obvious. 

The Advisory Action admits that Haverstock et al. entirely fail to teach assigning a 
unique identifier to the new operation that may be performed on a copy of a base document, 
updating the access control list to include an entry for the unique identifier corresponding to the 
new operation, and updating the access control list to include an entry identifying the roles that 
have access to the new operation. (Advisory Action, fflf 2 at p. 4.) Applicants' undersigned 
representative further points out that Haverstock et al. also do not teach receiving a request to 
create a new operation to be performed on the copy of the base document. Thus, Haverstock 
entirely fails to teach or even suggest four of the claimed elements. 

The Advisory Action incorrectly alleges that Sudama teaches assigning a unique 

identifier to new operations "because it is inherent for new operations to have assigned [sic, a] 

unique identifier." (Advisory Action, ffif 2 at p. 4.) Even the Advisory Action recognizes that 

Sudama does "not specifically [sic, teach] the updating the access control list step to include an 

entry for the unique identifier for the new operation or to include an entry identifying the roles 
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that have access~to the hew "operation." (Id.) Ne^rtheress~tKe~Advisory Action asserts Sudarha" 
renders the claim obvious. Applicants' undersigned representative respectfully disagrees. 

In truth, Sudama alleges to disclose a method and apparatus for administering an 
operation specified for performance on a set of independently managed hosts. (Abstract.) The 
operation is transferred to a management server designated by the system to administer the 
operation specified on the group object. The designated management server thereafter 
decomposes the group object into constituent objects which maybe host objects or additional 
group objects. (Abstract.) The decomposition continues until all group objects are decomposed 
into host objects, and the host objects are executed on various servers. After executing the 
operations, the host objects and group objects return status information back to the designated 
management server. (Abstract.) Ultimately, the status information is transmitted to the 
management server that initially received the operation. (Abstract.) Sudama further teaches 
assigning operation identifiers to objects and group objects that are created during the 
decomposition of the original object. (Col. 8, 11. 55-57.) These identifiers are used to facilitate 
the return of status information to the parent object. (Col. 8, 11. 61-63.) 

Thus, Sudama teaches assigning identifiers to sub-operations in order to track the 
operations and to facilitate return of status information. This is in contrast to claim 20, which 
specifies receiving a request to create a new operation that may be performed on the copy 
of the base document, assigning unique identifiers to new operations that may be 
performed on a copy of base document, and updating an access control list to include an 
entry identifying roles that have access to the new operation. In truth, Sudama nowhere 
teaches or suggests receiving requests to create a new operation that may be performed on the 
copy of the copy of the base document. Furthermore, Sudama nowhere suggests that unique 
identifiers be associated with new operations that may be performed on a copy of a base 
document, and updating an access control list to limit the roles that have access to the operation. 

Thus, neither Haverstock et al. nor Sudama teach receiving a request to create a new 
operation that may be performed on the copy of the base document, assigning a unique identifier 
to the new operation, updating the access control list to include an entry for the unique identifier 
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for the new operation, and updating the access control list to "include an entry identifying the 
roles that have access to the new operation. Accordingly, Applicants' undersigned representative 
respectfully requests withdrawal of the rejection. 

Furthermore, in order to establish a prima facie case of obviousness, there must be some 
suggestion or motivation, either in the references themselves or in the knowledge generally 
available to one of ordinary skill in the art, to modify the reference or to combine reference 
teachings. MPEP § 2143. The teaching or suggestion to make the claimed combination and the 
reasonable expectation of success must both be found in the reference, and not based on 
applicant's disclosure. MPEP § 2143 citing In re Vaeck, 947 F.2d 488, 20 USPQ2d 1438 (Fed. 
Cir. 1991). Therefore, even if Sudama taught the claimed elements, which the Advisory Action 
admits it does not, there is no suggestion in Sudama that its teachings should or could be used in 
another system, and more particularly one such as taught by Haverstock et al. Indeed, there is no 
teaching by Sudama that the system it discloses is suitable and useful in other systems such as a 
workflow control system. Workflow documents and controlling access to operations performed 
on those documents is simply not a consideration raised by Sudama. Rather, in Sudama the 
unique identifiers are generated for an entirely different purpose - to facilitate the return 
of status information regarding computer processes. There is no discussion in Sudama of 
workflows and creating operations to be performed on workflows. There is simply no 
motivation within Sudama to combine its teachings with those of Haverstock et al to form the 
claimed method. Applicants' undersigned representative respectfully requests that if the 
rejection is not withdrawn, in the interest of moving prosecution forward, that the Examiner 
quote the specific language within each reference that is alleged to provide the motivation to 
combine the references to arrive at the claimed combination. 

Newly Added Claims 

Applicants' undersigned representative submits that newly added claims 21 through 30 
patentably define over the cited references. 
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CONCLUSION 



Applicants' undersigned representative respectfully submits that all of the claims 
patentably define over the prior art of record. Reconsideration of the present Office Action and a 
Notice of Allowance are respectfully requested. 



Woodcock Washburn LLP 
One Liberty Place - 46th Floor 
Philadelphia PA 19103 
Telephone: (215) 568-3100 
Facsimile: (215) 568-3439 



Date: June 23, 2004 
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